Skip to content
OpenAdvisories

Product · HackerOne

headless-browser-lite node module

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.1
    CVE-2016-10625

    headless-browser-lite downloads Resources over HTTP

    headless-browser-lite is a minimal npm installer for phantomjs and slimerjs with no external dependencies. headless-browser-lite downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code executio…

    HackerOne headless-browser-lite node module headless-browser-lite npm